CVE-2024-9360
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 1, 2024
Updated: Oct 4, 2024
CWE ID 89
Summary
CVE-2024-9360 is a newly disclosed critical vulnerability affecting the Restaurant Reservation System 1.0. The issue lies within the /updatebal.php file, and an attacker can exploit it through manipulation of the company argument. This vulnerability enables SQL injection, allowing unauthorized access and potential data theft. The attack can be initiated remotely, increasing the risk to systems using this software. Public disclosure of the exploit adds urgency for affected organizations to apply patches or workarounds to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects